CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to compromise Oracle Mobile Field Service.
Vulnerability in Oracle Communications Unified Inventory Management (component: Security) affects versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0 and 8.0.1. An unauthenticated attacker with network access via HTTP can exploit this vulnerability, resulting in unauthorized access to critical data or complete access to all accessible data in the application.
Vulnerability in Oracle Communications Unified Inventory Management (component: Security) affects versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0 and 8.0.1. A low-privileged attacker with network access via HTTP can exploit this vulnerability, leading to takeover of the application.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (component: Product Quality Management) affects version 6.2.4. A low-privileged attacker with network access via HTTP can exploit this vulnerability, which requires user interaction, leading to takeover of the application.
Vulnerability in Oracle VM VirtualBox (component: Core) affects version 7.2.20. A low-privileged attacker with logon to the infrastructure where VirtualBox executes can exploit this vulnerability, which requires user interaction, leading to takeover of VirtualBox and potentially impacting other products.
Vulnerability in Oracle VM VirtualBox (component: Core) affects version 7.2.20. A low-privileged attacker with logon to the infrastructure where VirtualBox executes can easily exploit this vulnerability, leading to takeover of VirtualBox.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (component: Product Quality Management) affects version 6.2.4. A low-privileged attacker with network access via HTTP can easily exploit this vulnerability, leading to takeover of the application.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (component Product Quality Management) version 6.2.4. Easily exploitable by a low-privileged attacker with network access via HTTP, leading to takeover of the system.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (component Product Quality Management) version 6.2.4. Easily exploitable by a low-privileged attacker with network access via HTTP, leading to unauthorized creation, deletion, or modification of data and partial DOS.
Vulnerability in Oracle Helidon (component helidon-cors) versions 3.0.0-3.2.21. Easily exploitable by an unauthenticated attacker with network access via HTTP, leading to unauthorized modification and read access to data and impact on other products.
Vulnerability in Oracle Helidon (component helidon-common-mapper) versions 4.0.0-4.5.5 and 27.0.0. Difficult to exploit, allows an unauthenticated attacker with network access via HTTP to cause unauthorized modification of data, partial read access, and partial DOS.
Vulnerability in Oracle Helidon (component helidon-grpc-server) versions 3.0.0-3.2.21. Easily exploitable by an unauthenticated attacker with network access via HTTP/2, leading to unauthorized modification and read access to data and impact on other products.
Vulnerability in Oracle Helidon (component helidon-webclient-http2) versions 4.0.0-4.5.5 and 27.0.0. Easily exploitable by an unauthenticated attacker with network access via HTTP/2, leading to a hang or frequently repeatable crash (complete DOS).
Vulnerability in Oracle Cost Management (component Cost Planning) versions 12.2.3-12.2.15. Easily exploitable by a low-privileged attacker with network access via HTTP, leading to takeover of the system.
Vulnerability in Oracle Application Object Library (component DB Privileges) versions 12.2.3-12.2.15. Easily exploitable by a low-privileged attacker with logon to the infrastructure, leading to takeover of the system.
Vulnerability in Oracle Agile PLM (component Acollect) version 2.6. Easily exploitable by an unauthenticated attacker with network access via HTTP, leading to unauthorized access to critical data or all accessible data.
Vulnerability in Oracle Commerce Platform (component Dynamo Commerce Server) version 11.4.0. Easily exploitable by a low-privileged attacker with network access via HTTP, leading to unauthorized creation, deletion, or modification of data and partial read access.
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. CVSS 3.1 Base Score 8.8.
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. CVSS 3.1 Base Score 7.5.
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. CVSS 3.1 Base Score 7.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS